$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer File: 3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer (raw, json) Hash identifier: JyudcGULrSa/DetF1TanmP0LZuBb4Pdyj8et/KZv2sg= Subject key identifier: DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 1615 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Mon 26 Aug 2024 02:23:56 +0000 Certificate not after: Tue 26 Aug 2025 01:57:03 +0000 Subordinate resources: IP: 157.20.68.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 07:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5653 (0x1615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Aug 26 02:23:56 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DE872BAD262D18F0A6749E0272D975261D949EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:cf:e5:2e:90:f7:a1:8f:b4:6f:5e:2d:6b: eb:65:7b:bd:e4:2d:f3:ee:cc:80:eb:9a:ef:2d:e5: 40:1f:2b:b0:32:ca:d7:4d:71:dc:03:f6:c3:43:25: f4:da:06:ad:eb:46:c4:78:94:0c:8a:c7:41:c2:f7: a1:8b:7e:26:4e:14:cb:80:8c:36:30:24:f3:dc:f2: 1e:3d:9b:66:e6:26:c6:2f:56:cf:0a:8d:4d:ed:1c: 6e:66:07:24:89:7f:6f:23:21:9d:a2:39:2a:bd:53: 43:25:db:0d:54:1a:ac:82:72:dc:1a:4a:49:e9:81: dd:4a:c3:4b:46:af:71:d3:54:23:c6:08:3e:1c:ff: dc:90:17:72:9c:46:99:3f:71:1e:87:28:c4:ea:00: 12:4d:75:ae:57:ea:e7:25:bc:6a:03:3b:f6:75:e5: be:21:c8:36:b0:a8:b0:49:95:26:9d:fc:fe:96:d1: e6:b2:14:d6:70:e6:2a:28:e5:2d:48:e4:65:87:23: 7e:6f:60:53:70:68:23:62:16:11:89:47:a5:59:63: a7:68:1e:4d:3b:78:af:41:a0:f7:98:6c:94:5d:2c: 09:0b:ae:09:57:fd:41:e9:11:ec:c1:10:58:06:3f: 57:5d:02:64:dc:d9:dd:d7:d0:d8:c7:d9:b5:82:0e: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.68.0/23 Signature Algorithm: sha256WithRSAEncryption 10:c1:a3:d9:4a:89:2b:dc:95:5c:3c:56:6f:ec:c2:3c:2b:54: 11:4f:a0:e1:18:b4:48:de:f8:0d:a1:51:6c:bf:92:b9:9c:6e: ea:ec:19:a9:6b:af:6e:cb:05:5d:86:dc:5b:9e:f9:bc:ee:90: b3:75:77:e7:75:dd:8b:d6:3b:8e:2e:08:3d:25:72:4a:12:fe: e4:3a:14:20:f2:ab:58:57:ee:c5:18:87:61:69:ae:80:22:26: 07:81:73:d9:ba:c0:c9:d4:fa:93:ff:84:88:90:62:86:5c:74: 4f:20:15:22:69:4b:fd:4d:5e:e2:fc:b6:61:72:3d:e7:17:a9: 11:62:05:dd:69:87:73:6b:f4:56:85:ed:11:b5:f7:e6:6b:4c: e1:66:fe:cd:67:94:27:f0:92:97:e4:07:4b:21:c3:12:d7:f9: ba:54:5e:e3:dd:42:8c:0a:c6:7e:a2:dc:39:7e:59:65:e9:58: 66:1d:a4:04:b3:c7:8c:1f:2e:0c:fc:40:8f:ae:f6:28:22:ab: 96:a8:8a:39:bf:93:f9:e4:87:fb:67:e8:d0:76:58:2b:60:c1: 46:82:01:c3:1a:26:28:8d:3b:85:77:0d:b0:89:a5:09:b6:dd: e4:4a:66:62:35:77:19:88:63:11:ff:8c:ba:ba:ce:5a:2d:44: b8:58:0b:ab -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICFhUwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDgyNjAyMjM1NloXDTI1MDgyNjAxNTcwM1owMzEx MC8GA1UEAxMoREU4NzJCQUQyNjJEMThGMEE2NzQ5RTAyNzJEOTc1MjYxRDk0OUVD MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALuQz+UukPehj7RvXi1r 62V7veQt8+7MgOua7y3lQB8rsDLK101x3AP2w0Ml9NoGretGxHiUDIrHQcL3oYt+ Jk4Uy4CMNjAk89zyHj2bZuYmxi9WzwqNTe0cbmYHJIl/byMhnaI5Kr1TQyXbDVQa rIJy3BpKSemB3UrDS0avcdNUI8YIPhz/3JAXcpxGmT9xHocoxOoAEk11rlfq5yW8 agM79nXlviHINrCosEmVJp38/pbR5rIU1nDmKijlLUjkZYcjfm9gU3BoI2IWEYlH pVljp2geTTt4r0Gg95hslF0sCQuuCVf9QekR7MEQWAY/V10CZNzZ3dfQ2MfZtYIO FbkCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBTehyutJi0Y8KZ0ngJy2XUmHZSewzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRlVZVS8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9G VVlVLzNvY3JyU1l0R1BDbWRKNENjdGwxSmgyVW5zTS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdFEQwDQYJKoZIhvcNAQELBQADggEBABDBo9lK iSvclVw8Vm/swjwrVBFPoOEYtEje+A2hUWy/krmcbursGalrr27LBV2G3Fue+bzu kLN1d+d13YvWO44uCD0lckoS/uQ6FCDyq1hX7sUYh2FproAiJgeBc9m6wMnU+pP/ hIiQYoZcdE8gFSJpS/1NXuL8tmFyPecXqRFiBd1ph3Nr9FaF7RG19+ZrTOFm/s1n lCfwkpfkB0shwxLX+bpUXuPdQowKxn6i3Dl+WWXpWGYdpASzx4wfLgz8QI+u9igi q5aoijm/k/nkh/tn6NB2WCtgwUaCAcMaJiiNO4V3DbCJpQm23eRKZmI1dxmIYxH/ jLq6zlotRLhYC6s= -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:24 2024 by rpki-client on console-ams.rpki-client.org